Hah, no. It's mind-bogglingly easy to bypass MDM/DEP on even a T2-enabled/Apple Silicon MacBook. Like three minutes, and not overly complex. Without spelling

Hah, no. It's mind-bogglingly easy to bypass MDM/DEP on even a T2-enabled/Apple Silicon MacBook. Like three minutes, and not overly complex. Without spelling it out here, null route three DNS entries, install macOS Monterey, edit /etc/hosts similarly, and then upgrade to Sonoma. You can even remove the null routing after (it's only needed to bypass network calls in the installer). Nothing broken, no errors, 100% DEP-escaped. I suspect that the only thing you can't do at that point is reset to the OOB experience for selling it.